Privacy Policy
How we protect your information
Effective: January 2026
Introduction
E & B Express Courier, LLC ("EBX Couriers") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our medical courier services.
1. Information We Collect
1.1 Personal Information
We collect the following types of personal information:
- Contact Information: Name, email address, phone number, business address
- Delivery Information: Pickup and delivery addresses, recipient names and contact details
- Account Information: Username, password (encrypted), client preferences
- Payment Information: Billing address, payment method details (processed through secure third-party processors)
1.2 Health Information
As a medical courier, we may incidentally receive or access Protected Health Information (PHI) as defined by HIPAA. This may include:
- Patient names or identifiers on shipping labels
- Medical record numbers or specimen identifiers
- Information about the nature of medical materials being transported
All PHI is handled in strict accordance with HIPAA regulations and our Business Associate Agreements.
1.3 Automatically Collected Information
- GPS Location Data: Real-time location tracking of delivery vehicles (used for route optimization and delivery tracking)
- Device Information: IP address, browser type, operating system
- Usage Data: Pages visited, features used, time spent on platform
- Delivery Data: Timestamps, delivery confirmations, proof of delivery signatures/photos
2. How We Use Your Information
We use collected information for the following purposes:
2.1 Service Delivery
- Processing and fulfilling delivery requests
- Routing and dispatching drivers
- Providing real-time tracking updates
- Sending delivery notifications and confirmations
- Managing chain of custody documentation
2.2 Business Operations
- Processing payments and billing
- Customer service and support
- Investigating and resolving delivery issues or claims
- Maintaining delivery records and audit trails
2.3 Legal and Compliance
- Complying with HIPAA and other healthcare regulations
- Fulfilling DOT and state transportation requirements
- Responding to legal requests and preventing fraud
- Enforcing our Terms of Service
2.4 Improvement and Communication
- Analyzing service performance and user experience
- Improving route efficiency and delivery times
- Sending important service updates and announcements
- Marketing communications (with your consent, opt-out available)
3. Information Sharing and Disclosure
3.1 Third-Party Service Providers
We share information with trusted third-party service providers who assist in our operations:
- Payment Processors: For secure payment processing
- Tracking Systems: For GPS tracking and route optimization
- Cloud Storage: For secure data backup and storage
- Communication Services: For SMS notifications and email delivery
All third-party providers are contractually required to maintain the confidentiality and security of your information and are prohibited from using it for any purpose other than providing services to us.
3.2 Business Associates (HIPAA)
When handling PHI, we enter into Business Associate Agreements (BAAs) with healthcare clients as required by HIPAA. These agreements govern the permitted uses and disclosures of PHI.
3.3 Legal Requirements
We may disclose information when required by law, including:
- In response to court orders, subpoenas, or legal processes
- To comply with regulatory investigations
- To protect the rights, property, or safety of EBX Couriers, our clients, or others
- In connection with fraud prevention or security incidents
3.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change in ownership.
4. Data Security
We implement comprehensive security measures to protect your information:
4.1 Technical Safeguards
- Encryption of data in transit (TLS/SSL) and at rest (AES-256)
- Secure authentication and access controls
- Regular security audits and vulnerability assessments
- Intrusion detection and prevention systems
4.2 Physical Safeguards
- Secure facilities with restricted access
- Locked storage for sensitive documents
- Vehicle security measures for in-transit materials
4.3 Administrative Safeguards
- Annual HIPAA training for all employees
- Background checks for all drivers and personnel
- Strict access policies based on role and necessity
- Incident response and breach notification procedures
5. Your Rights
Your Privacy Rights
You have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your information (subject to legal retention requirements)
- Opt-Out: Unsubscribe from marketing communications at any time
- Data Portability: Request your data in a machine-readable format
- Restrict Processing: Request limits on how we use your information
5.1 HIPAA Rights
If we handle your PHI under a Business Associate Agreement, you have additional rights under HIPAA, including:
- Right to access your PHI
- Right to request amendments to your PHI
- Right to an accounting of PHI disclosures
- Right to request restrictions on PHI uses and disclosures
To exercise HIPAA rights, you must contact the healthcare provider (Covered Entity) that engaged our services.
5.2 Exercising Your Rights
To exercise any of these rights, please contact us at:
Email: Exbcouriers@gmail.com
Phone: 337-400-8118
Subject Line: "Privacy Rights Request"
We will respond to your request within 30 days and may require verification of your identity.
6. Data Retention
We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
- Delivery Records: 7 years (HIPAA requirement)
- Payment Records: 7 years (IRS requirement)
- Account Information: Until account closure + 2 years
- Marketing Data: Until opt-out or 3 years of inactivity
7. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to improve your experience on our website and mobile app:
- Essential Cookies: Required for login and security features
- Performance Cookies: Help us understand how you use our services
- Functional Cookies: Remember your preferences and settings
You can control cookies through your browser settings. Disabling certain cookies may limit functionality.
9. Third-Party Links
Our website may contain links to third-party sites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies.
10. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by:
- Posting the updated policy on our website with a new effective date
- Sending an email notification to registered users
- Displaying a prominent notice on our platform
11. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact:
E & B Express Courier, LLC
Privacy Officer
Metairie, Louisiana
Phone: 337-400-8118
Email: Exbcouriers@gmail.com
Last Updated: January 2026